Skip to main content Crate codewhale_execpolicy Copy item path Source bash_arity Bash arity dictionary for command-prefix allow rule matching. ExecPolicyAmendment A proposed amendment to the execution policy, suggesting new trusted prefixes. ExecPolicyContext Input context provided to the execution policy engine for a single check. ExecPolicyDecision The result of evaluating a command against the execution policy. ExecPolicyEngine Ruleset A named set of allow/deny prefix rules at a given priority layer. ToolAskRule Typed rule that controls whether a tool invocation is denied, allowed, or requires approval. AskForApproval Policy mode controlling when tool invocations require human approval. ExecApprovalRequirement The approval requirement determined by the execution policy engine. PermissionAction Permission action for a tool invocation rule. RulesetLayer Priority layer for typed permission-rule selection. Higher ordinal = higher
priority. Matching typed rules compare layer before action and specificity.
Hard denied prefixes are merged across layers and checked first. normalize_workspace_relative_path Returns a slash-separated path relative to workspace_root when value is
a safe path within that workspace. normalize_workspace_scope Return a stable absolute workspace scope suitable for a persisted rule.